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© Cipher system. 

© In a cipher system used in trasmission or storage of digital data, the encipherment section comprises a first 
modulo-2 adder for adding, bit by bit, the k-bit contents of a first shift register storing latest k bits of ciphertext 
rnformation and the k-bit contents of a first register. The k-bit output of the first modulo-2 adder is expanded into 
m n bits, which are sotred in a second register, and extracted in sequence, a set of n bits at a lime. Each set 
of n bits is converted into a single bit. A second modulo-2 adder adds the 1 bit output to the contents of a third 
register or bistable means, which stores the output of the second adder. A fifth register or bistable means stores 
plaintext information input through the input terminal. A third modulo-2 adder adds the output of the second 
adder to the contents of a register or bistable means storing plain text information to produce ciphertext 
information. A sixth register or bistable means stores the output of the third adder. The contents of the sixth 
register or bistable means are fed back to the first shift register, and are also output as ciphertext information. 
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Cipher System 



Field of Invention 



The invention relates to a cipher system used in transmission or storage of digital data for preserving 
secrecy on the transmission path or the storage media and to encipherment methods and decipherment 
methods for use in such a system and to terminals and apparatus for use in such a system or method. 



Background of the Invention 



Examples of prior art cipher systems are shown in proceedings of the 3rd Symposium on Information 
Theory and its Application. Nov. 1980. pp 371-377 'Some ConsideratioJi on a Simple Self-Synchronizing 
Encryption System* (this publication will be hereinafter referred to as Reference l). a Cryptography: A New 
Dimension .n Computer Data Security, by Stephen M. Matyas, published by John Wiley and Sons, New 
15 York U.S.A.. pp. 88-100 (this publication will be hereinafter referred to as Reference 2). 

Figure 9 is a block diagram showing an encryption system described In Reference 2. In this system, 
64-bit block Cipher is used in a i bit CFB (Ciphery Feed Back) mode. The, left hand side of the Figure is an 
encipherment section including an input terminal 901. a modulo-2 adder 902, a shift register 903. a 64-bit 
block encipherment unit 904. and a register 905. The right hand side of the Figure is a deciphemnent 
20 section including a shift register 907. a 64-bit block encipherment unit 908, a register 909. a modulo-2 
adder 910, and an output terminal 911. The encipherment section and the decipherment section are 
connected by a transmission path 906. . 

A bit series of plaintext is input through the input terminal 901 of the encipherment section, and is 
added at the adder 902 to the 1 bit at the left end of the register 905. to be enciphered. The enciphered bit 
senes (ciphertext) is transmitted through the transmission path 906 to the decipherment section. The 
enciphered bit senes is also fed back to the shift register 903. and stored in it for a predetermined time, or 
for a predetermined number of operation cycles, being shifted through the shift register 902. The 64-bit 
contents of the shift register 903 are input in parallel to the 64-bit block-encipherment unit 904 and 
converted into 64-bit data. The data output from the block-encipherment unit 904 are stored in a 64-bit 
register Only the leftmost bit of the register 905 is applied to the modulo-2 adder 902 for encipherment. 
The above operations are repeated, and the plaintext input through the input terminal 901 is enciphered bit 
by bit and transmitted through the transmission path to the decipherment section. 

The ciphertext received at a decipherment section is stored in a shift register 907 for a predetermined 
time and is also sent to the modulo-2 adder 910. at which the ciphertext and the leftmost bit of the register 
909 IS added by which decipherment is performed. The deciphered text is output through an output 
terminal 911 The shift register 907. the 64-bit block-encipherment unit 908, and the register 909 perform 
operations similar to those of the shift register 903. the 64-bit block encipherment unit 904 and the register 
905 Only if the encipherment key set in the 64-bit block encipherment unit 904 and the decipherment key 
set in the 64-bit block encipherment unit 908 are identical the contents of the registers in the encipherment 
40 section and the decipherment section coincide with each other. The information identical to the information 
input through the input terminal 901 is output through the output terminal 91 1 

Figure 10 is a block diagram showing a cipher system disclosed in Reference 1. In the illustrated 
system instead of the 64-bit block-encipherment units, code converters (such as ROM) 924 and 928 stonng 
code patterns corresponding to the respective encipherment keys are used. The system further includes an 
45 input terminal 921. modulo-2 adders 922 and 926, shift registers 923 and 927. a transmission path 925.,?nd 
an output terminal 929. 



50 



Summary of the Invention 

According to the invention there is firstly provided a method for enciphering plaintext bit-by-bit into 
ciphertext by inputting successive ciphertext bits into a shift register and encoding successive words 
formed into bits for combination with plaintext bits to give the ciphertext bits tor transmission; 

charactensed in that a code converter encodes m sections of n bits of the successive shift register 
words in sequence into a bit and the bits corresponding to the m sections are sequentially interrelated for 
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generating a single bit for combining with the plaintext bit to give the next ciphertext bit. 

Secondly there is provided a method for decipering cipher text bit-by-bit into plaintext by inputting 

successive ciphertext bits into a shift register and encoding successive words formed into bits for 

combination with ciphertext bits to give plaintext bits on reception; 
5 characterised in that a code converter encodes in m sections of n bits of the successive shift register 

words in sequence into a bit and the bits corresponding m sections are input sequentially interrelated for 

generated a single bit for combining with the ciphertext bit to give the next plaintext bit. The encipherment 

and encoding can be made more complex as required. The method may be implemented simply in 

dedicated hardware for quick realtime operation with major enciphering, deciphering components shared. 
'0 The bits outputted by the encoder may be held in a register which may be a single bistable or flip/flop and 

may be interrelated by using one encoder bit to act on the state of the bistable established by the previous 

bit in a cylic manner until the m sections have been processed. 

The correlation between the plaintext and the ciphertext can be made small, that is to say the ciphertext 

provides no clue as to the structure of the plaintext, and synchronization is automatically restored upon 
J 5 expiration of time proportional to the length of the shift register even after occurrence of a transmission path 

error or after synchronization being lost. 

The whole enciphered word formed by adding the shift register word and the encipherment key can be 

used for code conversion, not merely one bit thereof. The encipherment portion can be constructed fairly 

simply and cheaply and can be implemented in hardware form to provide a relatively high throughput 
20 without requiring necessarily any software assistance. The code converter can operate with a large 

encipherment key and a long shift register. without unrealistic code conversion items. 

Other preferred features of the invention are described by reference to Figures 1 to 8 and the claims. 



25 DRAWINGS: 

Figure 1 is a block diagram showing a general configuration of a first embodiment of the invention: 
Figure 2 is a block diagram showing an environment in which the encipherment section and the 
decipherment section are used: 
30 Figure 3 is a Circuit diagram showing a configuration of an encipherment unit: 

Figure 4 is a circuit diagram showing a configuration of a decipherment unit: 
Figure 5 is a timing chart showing data signals and control signals: 

Figure 6 is a diagram showing an example of truth table explaining the operation of the code 
converter: 

35 Figure 7 is a block diagram showing a second embodiment of the invention; 

Figure 8 is a timing chart showing data signals and control signals: 

Figures 9 and 10 are block diagrams showing prior art cipher systems shown and described in the 
Literatures 2 and 1. respectively. 

40 

Description of Inventive Embodiments 

With reference to Figure 1 its left side is an encipherment section comprising an input terminal 101 for 
inputting plaintext information into a register 102 for storing the inputted plaintext, a modulo-2 adder 103 

45 adding one bit of the plaintext stored in the register 102 and one bit stored in the register 115 which stores 
one-bit output of the mcKdulo-2 adder 113. a register 104 storing the output of the adder 103. a feedback 
path or loop 105 for feed back of the output of the adder 103 stored in the register 104 to a shift register 
106 whose length is k bits, a modulo-2 adder 108 for adding the bits of the contents of the shift register 106 
to the respective bits of the contents of the register 107. an expander 109 for expanding the k-bit output of 

50 the modulo-2 adder 108 into m * n bit data, a register 110 for storing the output of the expander 109, a 
controller for controlling the contents of the register 1 10 to be input, n bit at a time to a code converter 1 12 
which converts each set of n bits into a single bit. a modulo-2 adder 113 for adding the output of the code 
converter 112 and the output of the register 114, which stores the 1-bit output of the adder 113, a register 
115 for stonng the output of the adder 113. an output terminal 116 for outputting the contents of the register 

55 1 04 as ciphertext. and a control signal generator (not shown) for generating, responsive to a master clock 
and a transmission clock, a control signal by which input the contents of the register 110 are sequentially 
input, n bits at a time, into the code converter 112. a RESET signal for the register 114. a WRITE signal for 
the register 1 14. a WRITE signal for the register 115. a WRITE signal for the register 104, and the like. The 
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output from terminal 115 passes, along a signal transmission path 117 to a decipherment section. 

The right side of Figure i is the decipherment section, which comprises an input terminal 118 for 
inputting ciphertext iformation from the encipherment section, a register 119 for storing the ciphertext input 
through the input terminal 1 18. a modulo-2 adder 120 for adding the Single bit ciphertext information stored 
= in the register 119 to the output of the adder 129 stored in the register 131. a feedback path or loop 121 for 
feeding back the ciphertext to a shift register 122 having a k-bit length, a register 123 stonng a k-bit 
decipher key. a modulo-2 adder 124 for adding bit by bit the contents of the shift register 122 to the 
cont'-nts of the register i23. an expander 125 for expanding the k-bit output of the adder 124 into m ' n 
bits a register 126 for storing the output of the expander 125. a controller 127 for performing control to 
ro input the contents of the register 1 26. n bits at a time, into a code converter 1 28. which converts each set of 
n bits output from the controller 127 into single bit data, a modulo-2 adder 129 adding the output of the 
code converter 128 and the output of the register 130 which stores the 1-bit output of the adder 129. 
another register 131 which stores the 1-bit output of the adder 129. a register 132 which stores the output of 
the adder 120. an output terminal 133 for outputting the contents of the register 132 as a deciphered 
-5 information, and a control signal generator, not shown, that receives a master clock and a transmitted clock 
and produces a control signal for controlling the contents of the register 126 to be input into the code 
converter 128 in sequence, n bits at a time, a RESET signal for the register 130. a WRITE signal for the 
register 130. a WRITE signal for the register 131. a WRITE signal for the register 132. and the like. In the 
above description k. m. and n are arbitrary integers that satisfy m " n > k. 
20 Figure 2 is a block diagram showing the overall arrangement of the above embodiment. Figure 3 and 
Figure 4 are circuit diagrams showing the encipherment section 202 and the decipherment section 206 of 
the embodiment of Figure 2. In Figures 3 and 4. it is assumed that k = 32. m = 8, n = 8. The invention 
does not limit k m and n to the above values. In Figure 2. data signal generated from the data generator 
201 and a timing signal indicating the READ timing of the data signal are supplied to the encipherment 
25 section 202 At the encipherment section 202. the data being supplied is enciphered and the timing signal 
is sent to the transmitter 203. The transmitter 203 converts the data into a form of signal suitable for 
transmission via the transmission path, and transmits the converted data over the transmission path. The 
receiver 205 receives the signal from the transmission path 204 and extracts, from he received signal, the 
data signal and the timing signal and sends them to the decipherment section 206. The decipherment 
section 206 deciphers the data and sends the deciphered data to the data receiver 207. In a conventional 
data transmission in which the transmitted information is not enciphered, a data signal line for transmission 
of data and a timing signal for synchronizing the transmission of data signal are required. According to the 
embodiment of the invention, the signals which must be provided in the working environment are these two 
signals; the data signal and the timing signal. 

The encipherment section will be described in detail with reference to Figure 3. Figure 5 shows the 
relative timing of the data signal and the control signals. The timing signal Tc indicates the READ timing of 
the input data. Other control signals Sc, Dr. Wc, SELl to SEL8. Dc and Lc are generated by a controller, 
not shown having logic circuit configured to generate the signals at timings shown in Figure 5, using the 
timing signal Tc as a trigger and using the internal clock CLK. The control signal Sc, triggered by the falling 
40 edge of the timing signal Tc. shifts the contents of the four shift registers 306-1 to 306-4 one bit to the right. 
Simultaneously therewith, the data that have been held in the flip-flop 304 are shifted in the shift register 
306-1 . The control signal Or is generated at the same timing as the contro. signal Sc, by which the flip-flop 
312 is reset. Four registers 307-1 to 307-4 store encipherment keys and are called encipherment key 
registers. The encipherment keys are set in advance from the outside. Data from the shift register 306 (306- 
^5 1 to 306-4) and data from the registers 307 (307-1 to 307-4) are added at modulo-2 adders 308 (308-1 to 
308-4) The result of the addition are written in the registers 309 (309-1 to 309-8). The outputs of the adder 
308 and the input of the register 309 are so connected that each bit of the result of the addition is supplied 
to two registers. The output of the registers 309 are three-state outputs. When one of the control signals 
SEL (SELl to SEL8) is high, the signal from the corresponding register is input into the code converter 310. 
50 As shown in Figure 5. first the control signal SELl is made high, and the contents of the register 309-1 are 
input into the code converter 310. The code converter 310 is formed of a ROM (read-only-memory) or a 
random logic circuit. It outputs either 'V or 'O'. Its input consists of 8 bits and its output consists of one bit. 
The value of the output 'V or 'O' is unequivocally defined against each of the 2' = 256 values of the input. 
An example of the truth table showing the input-output relationship of the code converter 310 is shown in 
55 Figure 6 The output of the code converter 310 is passed through the modulo-2 adder 311. since the flip- 
flop 312 is reset, and applied to the flip-flops 312 and 313 and held at the flip-flop 312 at the timing of the 
conrol signal Dc. 

Next the control signal SEL 2 is turned high and the contents of the register 309-2 are input into the 
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code converter 310. The output of the code converter 310 is added at the modulo-2 adder 31 1 to the output 
of the flip-flop 312. and the result of the addition is held m the flip-flop 3i2 at the timing of the control signal 
Dc. Sinnilar processes are repeated responsive to the control signals SEL3 to SEL7. When the last control 
signal SEL8 is turned high, the contents of the register 309-8 are input into the code converter 3i0. whose 
outDut IS added at the adder 311 to the output of the flip-flop 312. The result of the addition is applied to 
the flip-flops 312 and 313 and is held in the flip-flop 313 at the tinning of the control signal Lc. The plaintext 
data input through the input terminal 301 is held in the flip-flop 302 at the rising edge of the timing signal 
Tc The outputs of the flip-flops 313 and 302 are added at the adder 303. and the sum is held at the falling 
edge of the timing signal Tc. The contents of the flip-flop 304 is output to a ciphertext through the output 
terminal 305, 

The decipherment section will now be described with reference to Figure 4. As illustrated, it comprises 
an input terminal 401. a flip-flop 402, an adder 403, a flip-flop 404, an output terminal 405. shift registers 
406-1 to 406-4. registers 407-1 to 407-4. adders 408-1 to 408-4. registers 409-1 to 409-8. a code converter 
410. an adder 411. and flip-flops 412 and 413. The operation of the decipherment section is identical to the 
operation of the encipherment section except that the information input through the input terminal is 
ciphertext. and the information output through the output terminal is a deciphered text, and the data fed 
back to the shift register is not the output of the flip-flop 404 corresponding to the flip-flop 304 of Figure 3 
but the output of the flip-flop 402 corresponding to the flip-flop 302 of Figure 3. In the above embodiment, 
the relationship between the plaintext Pt. and the ciphertext Ct and the deciphered text P't at time t can be 

expressed as follows: in the below expression e.. e, e„ and d., d, d,, denote encipherment key and 

decipherment key. respectively, and F denotes the function of the code converters 118 and 128. 
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C t = Pi 

@F (e2 9(l)C t-29 . 0®C t-30 . 63 .®C t-3 I . 632 

®Ct-32 . e ,eCt- 1 . e^®Ct-4) 

(5 F (e ,®C I - I . e 2<±)C t - 2 . e 3<i)C t - 3 . e 4 

0C t - 4 . e 50C t - 5 . — e 8©C t - a ) 

O F ( e 5®C t - 5 . e e^C t - g . e 7©C t - 7 . c e 

0C t - e . e t - 0 . — e I 2©C 1-12) 
©F ( e 9©C t - 9 . e 1 o©C t - i o . e 1 i©C t - i 1 . e t 2 

©C t - I 2 . e I 30C t - I 3 . — e 1 6©C t - I fi ) 
©F(ei3<5Ct-i3.e, 4©C t - i 4 . e i 5©C t - 1 s . e 1 e 

®C t - I s . e I 70C t - , 7 . — e 2 o©C t - 2 o ) 
©F { e I 7©C I - , 7 . c , O0C t - 1 8 . e I 9®C i - i 9 . e 2 o 

0C u - 2 o . e 2 10C I _ 2 1 . — e 2 4®C t - 2 4 ) 

©F (6 2 .©C I - 2 , . e22®Cl-2 2 . 62 a<2)C t-23 . e2 4 

0C t - 2 4 . e 2 t - 2 5 . - 6 2 8®C t - 2 o) 
e>F (c 2 s®C t - 2 5 . 6 2 t - 2 6 . 6 2 700 , - 2 7 . e 2 e 

0C t-2«. 6 2 9®Cl. 29.- 63^0^-32) 

P* t = Ct 

©F ( d 2 900 t - 2 9 . d 3 O® C t-30.d3/3Cl-3« '^^^ 

0C , - 3 2 . d i®C t - 1 . — d t - 4 ) 
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0F ( d ,(*)C t - I . d /DC t - 2 . d 30C t - 3 . d 4 

©Ct-4 . d5©Ct-5 . —deOCt-o) 

0F ( d 5©C t - s . d 60C t - 6 . d 7®C I . 7 . d a 

0C t - B . d g5)C I - 9 . — d , 200 t - I 2 ) 

0F ( d g0C t - 9 . d , cy2)C ^ - t o . d , ,0C t - 1 i . d , 2 

®C t - I 2 . d , 3©C t. - 1 3 . — d , 6©C t - . 6 ) 
©F (d , 3©C t - ,3 .d , /i)Ct - 1 - . d , 5<*)Ci-. s . d , 6 

©C t. - I B . d I 7©C t - I 7 . ••• d 2 0©C t - 2 O ) 
JO 0F ( d , tQC t _ , 7 . d , fl®C t - I o . d , g0C t - 1 9 . d 2 o 

0C t - 2 o . d 2 I0C I - 2 I . ••• d 2 4<i^ t - 2 4 ) 
®F ( d 2 I0C t - 2 I .da 20C t - 2 2 . d 2 3©C t - 2 3 . d 2 

®C t - 2 - . d 2 S0C t - 2 5 . — d 2 e©C t - 2 a ) 
(©F ( d 2 S0C t - 2 s . d 2 t - 2 6 . d 2 70C t - 2 7 . d 2 e 

®C t - 2 n • d 2 ^0C I - 2 9 . do 2(SC t - 3 2 ) 

Each terminal of the cipher system can comprise an encipherment section and a decipherment section 
as shown in Figure 3 and Figure 4. But as many of the circuit elements and interconnections of the 

35 encipherment section are identical to those of the decipherment section, and as they are not used for the 
two-purposes simultaneously, they can be shared for encipherment and decipherment if a suitable 
reconnection arrangement is provided. 

Figure 7 shows an example of a terminal having such an arrangement. As shown it comprises an input 
terminal 701 for receiving a plaintext, a flip-flop 702. an input terminal 801 for receiving ciphertext. a flip-flop 

40 802. adders 703. 803. flip-flops 704. 804, output terminals 705. 805. shift registers 706-1 to 706-4, 806-1 to 
806-4. registers 707-1 to 707-4. adders 708-1 to 708-4. registers 709-1 to 709-8, a code converter 710. an 
adder 711. a flip-flop 712. flip-flops 713, 813. switches 751. 752. 753. and 754-1 to 754-4. Signals similar to 
those shown in Figures 3 and 4 are denoted by identical numberals with a prime ('). in the emtxxitment of 
Figure 7. all circuit elements tn the encipherment section and the decipherment section, except the shift 

45 registers, are shared. Part of their interconnections are altered by the switches for operation as an 
encipherment section or as a decipherment section. In other words, they are used in a time-sharing manner. 
Plaintext is input through the terminal 701 and ciphered and output through the terminal 705. The ciphertext 
that ts received is input through the terminal 801 and the deciphered text is output through the terminal 805. 
The timings of various data and control signals are shown in Rgure 8. Switching between encipherment and 

50 decipherment is effected by means of a control signal E/D. The operation of the terminal connected for 
encipherment is identical to that described in connection with Figure 3. The opeation of the terminal 
connected for decipherment is identical to that described in connection with Rgure 4. 

As has been described, according to the invention, the contents of the shift register are added to the 
contents of the register storing the encipherment key or of the register storing the decipherment key. and 

55 the sum is applied to the code converter. Regardless of the number of keys, the code converter needs only 
one pattern. Moreover, data consisting of k = m n can tte divided into sets of n bits, and each set of n 
bits are input into the code converter. The number of pattners of the code converter need not be more than 
2^ The size of the code converter can therefore be reduced or the capacity of ROM can be reduced. For 
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instance the coe converter formed of a ROM. and m = 16. n = 8. k = 64 the capacity of the ROM need 
only to be 2' = 256 bits. Moreover, the complicated divisional processing or the repeated process bit 
manipulation as a 64.bit block encipherment. DES for instance, need not be performed but mmute variation 
m the enciphermentdecipherment key or in the plaintext information can be enlarged in the ciphertext 
5 information or deciphered text information. 

Claims 

;c 1. A cipher system compnsing an encipherment section and a decipherment section, the encipherment 

section comprising: 

a first shift register stonng latest k bits of ciphertext information; 
a first register storing k bits of cipher key: 
a first adder means for adding, bit by bit. the k-bit contents of the first shift register and the k-bit 
7 5 contents of tfie first register; ^ 

a first expander means for expanding the k-bit output of the first adder means into m n bits; 
a second register for storing the m ^ n-bit output of the first expander means; 

a first controller means for performing control to extract the contents of the second register in 

sequence, a set of n bits at a time; • »u r * 

20 a first code converter means receiving the output of the second register as extracted in turn by the first 

controller means, and converting each. set of n bits into a single bit; 

a third register; *u ♦ ♦ ^ 

a second adder means for adding the 1 bit output of the first code converter means to the contents ot 

the third register: 

25 the third register storing the output of the second adder means; 

a fourth register for storing the output of the second adder means. 

a fifth register for storing plaintext information input through the input terminal; 

a third adder means for adding the contents of the fourth register to the contents of the fith register to 
produce ciphertext information: 
30 a sixth register for storing the output of the third adder: 

a first feedback means for feeding back the contents of the sixth register to the first shift register; 
a first output means for outputting the contents of the sixth register as ciphertext information; and 

a first control signal generator means for generating control signals to control operation of various 
elements of the encipherment section. 
35 the decipherment section comprising: 

a second shift register storing latest k bits of ciphertext information; 
a seventh register storing k bits of cipher key; 

a fourth adder means for adding, bit by bit. the k-bit contents of the second shift register and the k-bit 
contents of the seventh register; x w 

40 a second expander means for expanding the k-bit output of the fourth adder means into m n bits: 

an eighth register for storing the m ^ n-bit output of the second expander means; 

a second controller means for performing control to extract the contents of the eighth register in 
sequence, a set of n bits at a time: 

a second code converter means receiving the output of the eighth register as extracted in turn by the 
45 second controller means, and converting each set of n bits into a single bit: 
a ninth register; 

a fifth adder means for adding the 1 bit output of the second code converter means to the contents of 
the ninth register; 

a ninth register storing the output of the fifth adder means; 
50 a tenth register for storing the output of the fifth adder means: 

an eleventh register for storing ciphertext information input through the input terminal; 

a sixth adder means for adding the contents of the tenth register to the contents of the eleventh 
register to produce ciphertext information: 

a twelfth register for storing the output of the sixth adder; 
55 a second feedback means for . feeding back the contents of the eleventh register to the second, shift 

register: ^ ♦ ^ 

a second output means for outputting the contents of the twelfth register as deciphered text 

information; and 
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a second control signal generator means for generating control signals to control operation of various 
elements of the encipherment section. 

where k. m and n are integers satisfying m n > k. 

2. A terminal for use in a cipher system, said terminal comprising an encipherment section and or a 
decipherment section, as defined in claim 1. 

3 A terminal according to claim 2. wherein said first register is also used as said seventh register: 

said first adder means is also used as said fourth adder means: 

said first expander means is also used as said second expander means; 

said second register is also used as said eighth register; 

said first controller means is also used as said second controller means; 

said first code converter means is also used as said second code converter means: 

said second adder means is also ued as said fifth adder means: 

said third register is also used as ssid ninth register; 

the encipherment section and the decipherment section being arranged for use of the above elements 
in a time-sharing manner. 

4. A terminal according to claim 3 further comprising switching means for selective connection of the 
elements shared by the encipherment section and the decipherment section, either for operation for 
encipherment or for decipherment. 

5. Method for enciphering plaintext bit-by-bit into ciphertext by inputting successive ciphertext bits into 
a shift register and encoding successive words formed into bits for combination with plaintext bits to give 
the ciphertext bits for transmission; 

characterised in that a code converter (112) encodes m sections of n bits in sequence of the 
successive shift register words into a bit and the bits corresponding to the m section are sequentially 
interrelated for generating a single bit for combining with the plaintext bit to give the next ciphertext bit. 

6. Method according to claim 5 characterised in that the shift register words are added to an 
encipherment key before encoding. 

7. Method according to claim 5 and claim 6 characterised in that m ^ n equals the shift register word 
length or in that expansion means are provided so that m ^ n is greater than"the shift register word length. 

8. Method for decipering cipher text bit-by-bit into plaintext by inputting successive ciphertext bits into a 
shift register and encoding successive words formed into bits for combination with ciphertext bits to give 
plaintext bits on reception; 

charactensed m that a code converter {128) encodes m sections of n bits in sequence of the 
successive shift register words into a bit and the bits correspondirig to the m sections are sequentially 
interrelated for generating a single bit for combining with the ciphertext bit to give the next plaintext bit, 

9. Apparatus for enciphering plaintext bit-by-bit into ciphertext having means for inputting successive 
ciphertext bits into a shift register and encoding successive words formed into bits for combination with 
plaintext bits to give the ciphertext bits for transmission; 

characterised m that a code converter (112) is provided for encoding m section of n bits in sequence of 
the successive words into a bit and means are provided for sequentially interrelating the bits relating to the 
m sections and generating a single bit for combining with the plaintext bit to give the next ciphertext bit. 

10. Apparatus for deciphering ciphertext into plaintext having means for inputting successive ciphertext 
bits into a shift register and encoding successive words formed into bits for combination with ciphertext bits 
to give plaintext bits on receiption; 

characterised in that a code converter (128) is provided for encoding m sections of n bits in sequence 
of the successive words into a bit and means are provided for sequentially interrelating the bits formed 
corresponding to the m sections and generating a single bit for combining with the cipher text bit received 
to form a plain text bit. 
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